CVE-2023-27574

ShadowsocksX-NG 1.10.0 is affected by CVE-2023-27574 due to CODE_SIGNING_INJECT_BASE_ENTITLEMENTS that causes signing with com.apple.security.get-task-allow entitlements. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interaction, and impact to confidentiality, inte...